$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft File: oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft (raw, json) Hash identifier: LVI7prYnGaRZUwSFw4KTCGFAq7aTDFbwBwh4RmLZcpI= Subject key identifier: 4F:D1:CF:AA:F5:A1:D5:6C:93:1E:A7:D7:FC:49:D7:09:BB:EA:7A:2C Authority key identifier: A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA Certificate issuer: /CN=A91F5804/serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft Manifest number: 014D Signing time: Thu 19 Jun 2025 03:38:15 +0000 Manifest this update: Thu 19 Jun 2025 03:38:15 +0000 Manifest next update: Thu 26 Jun 2025 03:38:15 +0000 Files and hashes: 1: oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl (hash: 1OmGQWCI9aIsQUmCMlBTlUdRMj/vMLHXkR3qliOIx+I=) 2: 599F65C652C011EEAAE0CD34C4F9AE02.roa (hash: RkTUA678ggeVul1y+nwQF7cmzTi/KyCvH3jL9UTL73c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5804, serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA Validity Not Before: Jun 19 03:38:15 2025 GMT Not After : Jun 26 03:38:15 2025 GMT Subject: CN=68538627-f43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:c2:30:56:d2:03:81:17:fc:82:5e:13:4b: c6:64:a2:0a:89:9e:98:59:a9:89:f7:65:9a:4a:10: aa:ca:be:35:08:7e:cc:c2:48:2c:6f:4c:aa:92:5a: db:ad:f1:1c:e0:fb:2f:80:40:38:ff:4a:aa:c6:e9: ed:5e:e7:3c:d8:6e:b8:63:cc:d8:4a:49:f7:f3:5b: 28:c0:84:ad:33:6a:68:98:61:8e:b4:ec:71:ca:76: b4:c6:df:fd:41:d2:58:c0:5b:69:3f:53:5a:53:bd: 0b:5a:2c:61:1f:e8:9d:59:0a:d7:31:80:5b:13:f5: 39:aa:75:e5:c3:5d:52:5a:d2:ca:4f:ba:5e:c5:ed: 4f:76:7d:a6:cf:6c:f9:7b:93:27:70:b5:18:62:64: 03:50:09:db:87:9c:3f:1e:56:9a:a4:96:50:14:78: 3e:80:a1:a3:f2:c4:98:0b:30:6e:42:32:0c:17:38: b0:50:0d:0e:d1:12:cc:fa:ea:4a:7d:72:d6:99:94: 64:24:8b:40:25:fd:bf:1b:c3:80:39:f1:2c:25:03: 1a:28:a8:38:ef:c3:de:4f:24:c9:a4:e4:ce:d8:5d: 98:78:ec:d4:72:12:31:7c:7d:94:02:32:c7:c2:d0: 03:c7:2d:0e:ac:12:f8:87:09:de:44:c8:f8:4a:e5: 03:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D1:CF:AA:F5:A1:D5:6C:93:1E:A7:D7:FC:49:D7:09:BB:EA:7A:2C X509v3 Authority Key Identifier: keyid:A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f6:61:d0:7a:5d:3c:c1:04:f4:f9:55:f3:f4:66:de:89:4a: d8:2d:95:36:11:b1:f5:87:42:56:d6:f2:27:67:c4:ce:6a:42: ab:69:65:72:44:0f:1e:97:14:c4:40:9d:25:69:3d:1d:7d:95: d6:3e:24:7d:08:ff:f4:0e:84:45:0b:ed:fd:6e:e4:f3:06:4d: 1c:77:3b:35:e9:b6:23:6e:c1:71:f4:89:8d:64:8a:ef:0d:c5: 09:f3:ce:f3:13:f8:2e:46:b2:99:2a:66:b0:6b:ba:8b:a4:72: ef:07:9f:90:8e:20:d3:82:e3:ac:c9:cf:c9:7b:0f:7b:cd:bf: d1:b5:29:50:f1:54:be:08:d8:03:42:ea:3c:28:f4:5b:e8:5f: 42:2e:0b:f7:02:29:6d:a5:58:3b:20:16:44:ed:e6:81:ef:1f: f7:10:61:95:48:95:8e:2a:b6:6f:d6:0b:85:f9:31:f8:30:f3: 7a:82:b1:4f:dc:2e:7c:da:3b:28:d2:33:83:f9:82:94:cb:5d: 7d:3e:6e:1c:f6:c1:cc:b6:f6:38:d8:ef:ff:87:56:29:70:97: bd:aa:9b:79:c7:c5:bc:e2:c3:55:55:c5:93:8a:bf:89:08:5e: 75:2c:90:6f:c4:90:0a:e6:ac:9f:52:c7:e1:9d:51:99:eb:02: b8:00:41:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4MDQxMTAvBgNVBAUTKEEwRkE2NkY2OTM0QUEyODEzRTFBMUYwMDczOTU5MEM2 MzU3RDQwREEwHhcNMjUwNjE5MDMzODE1WhcNMjUwNjI2MDMzODE1WjAYMRYwFAYD VQQDEw02ODUzODYyNy1mNDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxzCMFbSA4EX/IJeE0vGZKIKiZ6YWamJ92WaShCqyr41CH7Mwkgsb0yqklrb rfEc4PsvgEA4/0qqxuntXuc82G64Y8zYSkn381sowIStM2pomGGOtOxxyna0xt/9 QdJYwFtpP1NaU70LWixhH+idWQrXMYBbE/U5qnXlw11SWtLKT7pexe1Pdn2mz2z5 e5MncLUYYmQDUAnbh5w/HlaapJZQFHg+gKGj8sSYCzBuQjIMFziwUA0O0RLM+upK fXLWmZRkJItAJf2/G8OAOfEsJQMaKKg478PeTyTJpOTO2F2YeOzUchIxfH2UAjLH wtADxy0OrBL4hwneRMj4SuUD3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/Rz6r1 odVskx6n1/xJ1wm76nosMB8GA1UdIwQYMBaAFKD6ZvaTSqKBPhofAHOVkMY1fUDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTgwNC9DMjEzOEQ0MDUy QkYxMUVFOEU0NEFBMUJDNEY5QUUwMi9vUHBtOXBOS29vRS1HaDhBYzVXUXhqVjlR Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29QcG05cE5Lb29FLUdoOEFjNVdReGpWOVFOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTgwNC9DMjEzOEQ0MDUyQkYxMUVFOEU0NEFBMUJDNEY5QUUwMi9vUHBtOXBOS29v RS1HaDhBYzVXUXhqVjlRTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu9mHQel08wQT0+VXz9GbeiUrYLZU2EbH1h0JW1vInZ8TOakKraWVy RA8elxTEQJ0laT0dfZXWPiR9CP/0DoRFC+39buTzBk0cdzs16bYjbsFx9ImNZIrv DcUJ887zE/guRrKZKmawa7qLpHLvB5+QjiDTguOsyc/Jew97zb/RtSlQ8VS+CNgD Quo8KPRb6F9CLgv3AiltpVg7IBZE7eaB7x/3EGGVSJWOKrZv1guF+TH4MPN6grFP 3C582jso0jOD+YKUy119Pm4c9sHMtvY42O//h1YpcJe9qpt5x8W84sNVVcWTir+J CF51LJBvxJAK5qyfUsfhnVGZ6wK4AEG4 -----END CERTIFICATE-----Generated at Fri Jun 20 10:22:36 2025 by rpki-client